# CDI NET

> CDI NET (Cybersecurity and Digital Identity Networks) is a Romanian cyber security company accredited by DNSC — Directoratul Național de Securitate Cibernetică, Romania's National Cyber Security Directorate — for cyber security audit and consultancy. Services: NIS2 risk assessment and implementation, governance consultancy for NIS2 and ISO 27001, SOC/CSIRT technical consultancy, penetration testing, purple teaming and red teaming. CDI NET also develops the SURU platform: actionable cyber security for non-technical people, SOHO and SMB (IMM) companies.

Key facts:

- Accredited by DNSC (company and personnel) to perform cyber security audits, including audits for entities regulated under NIS2 in Romania.
- Team certifications: OSCP (OffSec), CEH and CEI (EC-Council), GIAC GCTI / GSTRT / GCFA / GSNA / GMON / GRTP, SANS trainings (Red Team Ops, Threat Hunting, Advanced Forensics, Incident and Crisis Management, Cybersecurity Programs and Governance), ISO/IEC 27001 Lead Implementer (PECB), ISO/IEC 27001 and 27018 Internal Auditor (EY CertifyPoint), ISO 27001 ISMS Internal Auditor (TÜV), ITIL Foundation (ISEB).
- SURU platform variants: SURU FOSS (open source), SURU Lite (built-in AI), SURU AI Plus (cloud integration with major AI providers). Runs self-hosted on-premises or as SaaS in the cloud.
- Location: Sibiu, Romania.
- Languages: English (main), Romanian.
- Contact: contact (at) cdinet (dot) ro, or the contact form on the website.

## Pages

- [Home — English](https://cdinet.ro/): Services, credentials, SURU platform, FAQ and contact
- [Acasă — Română](https://cdinet.ro/ro/): Romanian version of the same page
- [The NIS2 compliance path in Romania](https://cdinet.ro/nis2-compliance/): the seven obligations essential and important entities owe DNSC under OUG 155/2024 (notification, risk-level evaluation, maturity self-assessment, measures plans, controls, cyber security audit) plus the three standing duties (incident reporting, governance, DNSC control), each with its deadline
- [Traseul de conformitate NIS2](https://cdinet.ro/ro/conformitate-nis2/): Romanian version of the NIS2 compliance path article
- [Traseul de conformitate NIS2, one-page diagram (PDF)](https://cdinet.ro/assets/CDI-NET-Traseul-Conformitate-NIS2-2026.09.pdf): downloadable summary of the ten NIS2 obligations with deadlines and legal bases, in Romanian, version 2026.09, © CDI NET S.R.L.
- [CSIRT under NIS2 in Romania](https://cdinet.ro/csirt-requirements/): how essential and important entities cover incident response under OUG 155/2024 (own CSIRT, sectorial CSIRT or DNSC-authorized provider), the seven steps of creation and operation, the three standing duties, the DNSC implementing orders still unpublished, and where the SURU platform contributes (monitoring, alerts, response, reporting)
- [Cerințe CSIRT](https://cdinet.ro/ro/cerinte-csirt/): Romanian version of the CSIRT article
- [Traseul CSIRT, one-page diagram (PDF)](https://cdinet.ro/assets/CDI-NET-Traseul-CSIRT-2026.09.pdf): downloadable summary of the CSIRT creation and operation path with legal bases, in Romanian, version 2026.09, © CDI NET S.R.L.

## Code

- [SURU FOSS repository](https://github.com/cdi-net/suru-foss): Open-source variant of the SURU platform